wafconfg.xml
Doppala, Karthik
kdoppala at it.ucla.edu
Fri Oct 21 18:07:22 BST 2011
Scott,
Its actually whitelisting the IDP's and by that I mean filtering a selected few entityId's from the metadata files. Since SP's are also needed to be included in the filter list there is a scope for updating the wayfconfig.xml file on a regular basis which we would like to avoid.
Thanks,
Karthik
On 10/20/11 6:14 PM, "Doppala, Karthik" <kdoppala at it.ucla.edu<mailto:kdoppala at it.ucla.edu>> wrote:
>I have a question regarding the wayfconfig file. We have certain Idp?s
>and SP?s included in a white list and would be including SP?s on a
>regular basis to this list but the issue is; we would have to restart
>the service whenever a change is made to the wayfconfig.xml which we
>are not in favor of. I was wondering if there is a way we could avoid
>restarting the service. Any help is appreciated.
There's not.
I don't know exactly what you mean by whitelisting SPs, the DS doesn't generally do anything but use metadata for SPs to enforce response locations, it doesn't maintain a list of them for any other reason that I know of.
-- Scott
From: Doppala, Karthik
Sent: Thursday, October 20, 2011 3:14 PM
To: 'users at shibboleth.net'
Subject: wafconfg.xml
Hello All,
I have a question regarding the wayfconfig file. We have certain Idp's and SP's included in a white list and would be including SP's on a regular basis to this list but the issue is; we would have to restart the service whenever a change is made to the wayfconfig.xml which we are not in favor of. I was wondering if there is a way we could avoid restarting the service. Any help is appreciated.
Thanks,
Karthik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111021/f5caf939/attachment.html
More information about the users
mailing list